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(54) Electronic ticket vending system and method thereof 



(57) A system comprises an electronic ticket vend- 
ing and refunding device (1 ) retained by a ticket publish- 
er, a terminal device (3) having a data input device (1 9), 
a data display device (18), and a data transmission and 
reception device, etc. which are operated by a purchas- 
er, and en electronic ticket storage device retained by 
the purchaser, and the vending and refunding device 
and the terminal device are connected by a communi- 
cation line such as a telephone line, and the storage de- 
vice and the terminal device can be connected in contact 
or non-contact, and transmission and reception of data 
between the vending and refunding device and the stor- 
age device are executed by electronic money and an 
electronic ticket which are electronically signed, and a 
trouble of sending and receiving of an electronic ticket 
and electronic money is prevented by recording the 
transaction history as required. 
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Description 

The present invention relates to an electronic ticket 
vending system or an electronic ticket vending/refund- 
ing system and a method thereof using electronic infor- 
mation (hereinafter called electronic money or electron- 
ic cash) having the value of money for purchasing com- 
modities, receiving services, or cashing a check or elec- 
tronic information (electronic ticket) on train tickets or 
concert admission tickets which are generally called 
tickets. 

Conventionally, to purchase a train ticket or a con- 
cert ticket, it is generally necessary to go to a counter 
for vending tickets. The reason is that a ticket is a printed 
paper and it is necessary to pay the cost of the ticket. 
Some ticket may be purchased by telephone, though it 
is necessary to mail the ticket. In this case, a credit card, 
bank transfer, mail transfer, or cash registration is used 
so as to pay the cost of the ticket. However, in the case 
of bank transfer, mail transfer, or cash registraiion, ii is 
necessary to go to a bank or a post office. 

Recently, as a new settling means, for example, 
there is a method using electronic data (hereinafter re- 
ferred to as electronic money) having the value of mon- 
ey which is disclosed in Published Unexamined Patent 
Application (Based on International Application) 
5-504643. In this conventional example, a means for 
storing electronic money (hereinafter called an electron- 
ic purse), a means for transferring electronic money be- 
tween a host computer of a bank and an electronic 
purse, a means for transferring electronic money be- 
tween two electronic purses, and a means for prevent- 
ing forgery or illegal reproduction of electronic money 
are described. In this example, as a means for prevent- 
ing forgery and illegal reproduction of electronic money, 
an asymmetric encryption algorithm represented by the 
RSA (Rivest Shamier Adleman) algorithm and a sym- 
metric encryption algorithm represented by the DES 
(Data Encryption Standard) are used. 

By using an electronic money system having these 
encryption arts, electronic money can be transferred 
safely between two electronic purses connected by a 
telephone line. The encryption arts used in this conven- 
tional example can be applied also to transfer of elec- 
tronic ticket information by a public line such as tele- 
phone. Namely, when an electronic ticket having elec- 
tronic ticket information printed on a paper, the afore- 
mentioned electronic money as a means for paying the 
ticket cost, and a physical storage medium such as an 
IC card storing them are used, by using a communica- 
tion means such as telephone, a ticket can be pur- 
chased without going to a ticket vending window, a bank, 
or a post office. In the same way, refunding of the ticket 
cost due to cancel of the ticket can be executed by using 
a communication means such as telephone. 

An electronic ticket storing just electronic ticket in- 
formation may be easily forged or reproduced illegally. 
By using encryption by an asymmetric algorithm equiv- 



alent to the means for preventing forgery and illegal re- 
production of electronic money which is used in the 
method disclosed in Published Unexamined Patent Ap- 
plication 5-504643 mentioned above, illegality can be 
s prevented to a certain extent. 

In the encryption method in the aforementioned 
conventional example, when electronic money is sent 
between electronic 

10 purses storing electronic money, by using the only 
common global secret key in one electronic money 
system as a means for judging whether the opposite 
of communication belongs to the same electronic 
money system as that of oneself or not, a local 
15 secret key used by each electronic purse when 
money is sent between electronic purses is signed 
electronically. All electronic purses belonging to the 
aforementioned electronic purse system have a 
global public key corresponding to the aforemen- 
20 lioned global secret key, so that by using the global 
public key, the encryption method can judge 
whether the opposite of communication belongs to 
the same electronic money system as that of one- 
self or not. There is a so-called prepaid card for pur- 
2S chasing by prepaying the cost as electronic money. 

A prepaid card does not have a function for using 
for anything like money, and objects to be pur- 
chased (commodities or services) are decided, and 
information to be stored is just data of frequency 
30 equivalent to the selling price Particularly, since a 
prepaid card cannot cancel or refund a purchased 
object, it is different from electronic money which 
functions like money. 

35 However, if it is attempted to apply an electronic 
money system having the aforementioned encryption 
art of the prior art to an electronic ticket vending and 
purchasing system using a public line such as tele- 
phone, there is only one kind of common global secret 

40 key and it is not signed electronically on the electronic 
money itself, so that the problems described hereunder 
are imposed. 

When a plurality of ticket publication sources (for 
example, a railroad corporation, airplane company, 
event promoter, etc.) share the same electronic ticket 
system, in other words, when electronic tickets pub- 
lished by different ticket publishers are stored and used 
in one kind of electronic ticket storage device at the 
same time or one after another, a ticket publisher may 

so forge or reproduce illegally a ticket published by another 
ticket publisher by using the I/O interface, command in- 
terface, or encryption mechanism of the electronic ticket 
storage device. Therefore, when the same electronic 
ticket storage device is shared, a means for preventing 

55 forgery and illegal reproduction of a ticket by another 
ticket publisher is necessary. There is an IC card (also 
called a smart card) as a typical example of the elec- 
tronic ticket storage device. 
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Furthermore, when ticket information stored in the 
electronic ticket storage device is encrypted, to confirm 
the ticket information stored in the electronic ticket stor- 
age device by a ticket purchaser, a terminal device hav- 
ing a decryption means is necessary. However, in con- 
sideration of convenience, it is desirable that a portable 
terminal device on the market can be used. 

When cash or a ticket is given or received by tele- 
phone, a ticket purchaser and a ticket vender are locat- 
ed away from each other, so that a trouble may be 
caused that cash or a ticket is stolen off or cash or a 
ticket is not given or received actually. For example, 
when a ticket purchaser makes a claim for that he re- 
ceives no ticket alter he purchases a ticket and pays 
electronic money as a cost of the ticket, the ticket pur- 
chaser may tell the truth or make a false statement. 
Even when a ticket purchaser makes a claim for that no 
electronic money is sent to nm after he transfers his tick- 
et to the ticket vendc sc as to rotund the ticket, the same 
is caused. 

Furthermore, it ib nbbumud mat to lefund the ticket 
cost, a ticket purchaser sends an electronic ticket to a 
ticket vender first and tnc ticket vender checks the va- 
lidity of the tickei and thcr. sends the ticket cost to the 
ticket purchaser by electronic money When an electron- 
ic ticket is to be sent if a copy of the electronic ticket is 
sent to the ticket vender without deleting the electronic 
ticket and the electronic ticket storage device (IC card) 
is pulledout forcibly from the terminal device at the same 
time that the ticket cost is sent from the ticket vender, a 
problem arises that the valid ticket and the refunding 
cost of the ticket exist on the ticket purchaser side at the 
same time. On the other hand, when an electronic ticket 
is deleted from the electronic ticket storage device so 
as to send the electronic ticket, if a communication fail- 
ure occurs before the ticket refund reaches the ticket 
purchaser after the electronic ticket is sent, a status that 
the ticket purchaser loses the ticket and cannot receive 
the refund occurs. Since the ticket is deleted, even if the 
ticket purchaser attempts to make a claim for the ticket 
vender, a problem arises that there is no physical evi- 
dence. 

Perferably, an object of the present invention is to 
solve these problems and to provide an electronic ticket 
vending and refunding system and a method thereof for 
working when a plurality of ticket venders share on ly one 
electronic ticket vending and refunding system in a sys- 
tem for purchasing or refunding a tickei from a distant 
place using a telephone line for preventing forgery or 
illegal reproduction of an electronic ticket by a ticket pur- 
chaser and allowing a ticket purchaser to confirm the 
content of an electronic ticket even by a terminal device 
having no means for decrypting ticket information stored 
in the electronic ticket storage device. 

Preferably, another object of the present invention 
is to provide an electronic ticket vending and refunding 
system and a vending and refunding method thereof for 
working when a transaction using electronic money and 



an electronic ticket is executed via a telephone line for 
preventing a trouble on whether the electronic money 
and the electronic ticket are given or received actually. 
Preferably, still another object of the present inven- 

5 tion is to provide an electronic ticket vending and refund- 
ing system and a vending and refunding method thereof 
for preventing a ticket purchaser from retaining both a 
valid ticket and a refund at the same time so as to refund 
the ticket cost and proving that the ticket purchaser re- 

10 tains the ticket when he cannot receive the refund. 

Preferably, the electronic ticket vending system or 
vending and refunding system and the method thereof 
of the present invention comprise a vending device for 
generating an electronic ticket and executing at least 

75 one of vending and refunding by exchanging the gener- 
ated electronic ticket with electronic money and a com- 
munication line connected to it and furthermore com- 
prise at least one terminal device connected to the 
aforementioned communication line for executing input, 

20 output, and transmission and reception so as to execute 
at least one of vending and refunding of an electronic 
ticket and an electronic ticket storage device having a 
function for electronically connecting the aforemen- 
tioned terminal device for storing electronic money and 

25 a purchased electronic ticket, wherein by a request of 
at least one of purchasing and refunding of an electronic 
ticket by at least one of the aforementioned terminal de- 
vice and electronic ticket storage device, at least one of 
the electronic ticket and the electronic money is sent 

30 from the aforementioned electronic ticket vending de- 
vice via the aforementioned communication line. 

Preferably, more concretely, the electronic ticket 
vending and refunding system of the present invention 
is a ticket vending and refunding system using electronic 

35 money and an electronic ticket and comprises an elec- 
tronic ticket vending and refunding device for producing 
an electronic ticket and vending or refunding the pro- 
duced electronic ticket by electronic money, a terminal 
device for executing at least input, display, and trans- 

40 mission and reception of electronic ticket vending and 
refunding data, and an electronic ticket storage device 
for storing an electronic ticket purchased by electronic 
money, wherein the aforementioned electronic ticket 
vending and refunding device is connected to the afore- 

45 mentioned terminal device by a communication line 
such as a telephone line and the aforementioned elec- 
tronic ticket storage device is connected to the terminal 
device in contact or non-contact. 

In the aforementioned electronic ticket vending and 

50 refunding system, it is desirable that the aforementioned 
electronic ticket vending and refunding device compris- 
es at least a ticket production means for producing a 
ticket, a ticket transmission and reception means for 
transmitting or receiving an electronic ticket, a money 

55 transmission and reception means for transmitting or re- 
ceiving electronic money, a money storage means for 
storing electronic money, a transaction history storage 
means for storing a transaction history, and an encryp- 
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tion key storage means for storing an encryption key. 

It is desirable that the aforementioned ticket produc- 
tion means comprises at least a microcomputer for pro- 
ducing an electronic ticket from data indicating a ticket 
publication source and data indicating the price of a tick- 
et. 

To prevent another ticket publisher from publishing 
a ticket which is forged or illegally reproduced even if a 
plurality of ticket publishers share a single electronic 
ticket system, the aforementioned electronic ticket 
vending and refunding device can allocate a different 
secret key of asymmetric encryption algorithm and a dif- 
ferent public key which forms a counterpart to the secret 
key to each ticket publisher and store them in the afore- 
mentioned encryption key storage device. 

Furthermore, it is desirable that the electronic ticket 
storage device comprises at least an electronic ticket 
storage means and an electronic money storage means 
for storing an electronic ticket and electronic money re- 
spectively, a Iransaction history slorage means, an i/O 
interface with the outside, and a microprocessor which 
is set so as to control transmission and reception of an 
electronic ticket and electronic money and storage the 
history thereof. 

Furthermore, it is desirable that to allow oven a ter- 
minal device having no decryption mechanism to con- 
firm the content of an electronic ticket stored in the elec- 
tronic ticket storage device, the electronic ticket storage 
device comprises a means for storing unencrypted tick- 
et data and a means for storing an electronic signature 
which is produced by encrypting the whole or a part of 
the aforementioned ticket data by the secret key of the 
asymmetric algorithm and the microprocessor can op- 
erate so as to return the aforementioned unencrypted 
ticket information to a first command obtained via the 
aforementioned physical interface with the outside as a 
response to the first command and to check the validity 
of a second command for the second command and re- 
turn the aforementioned ticket information and afore- 
mentioned electronic signature as a response to the 
second command when it judges that the second com- 
mand is valid. 

As an alternative means therefor, it is possible that 
the aforementioned electronic ticket storage means 
comprises a means for storing ticket information which 
is encrypted by the secret key of the asymmetric encryp- 
tion algorithm and a means for storing a pub lie key which 
forms a counterpart to the secret key which encrypts the 
ticket information and the microprocessor is set so as to 
return the result which is obtained by decrypting the 
aforementioned encrypted ticket information by the pub- 
lic key to a first command obtained via the aforemen- 
tioned physical interface with the outside as a response 
to the first command and to check the validity of a sec- 
ond command for the second command and return the 
aforementioned encrypted ticket information as a re- 
sponse to the second command when it judges that the 
second command is valid. 



Furthermore, as a means for judging the validity of 
an electronic ticket, it is possible that the aforemen- 
tioned microprocessor of the electronic ticket storage 
device is set so as to return a response to a third com- 
5 mand and an electronic signature obtained via the phys- 
ical interface with the outside on whether there exists 
an electronic signature conforming to the aforemen- 
tioned electronic signature in the electronic ticket stor- 
age means. 

To prevent an I/O history of an electronic ticket and 
electronic money from alteration, it is desirable that the 
aforementioned microprocessor of the electronic ticket 
storage device is set so that an item relating to the afore- 
mentioned electronic ticket cannot be deleted from the 
transaction history storage means until the electronic 
ticket stored in the electronic ticket storage means is de- 
leted. 

Furthermore, to prevent both the ticket to be refund- 
ed and the refund from existing in the electronic ticket 
storage device at the same lime by pulling out the elec- 
tronic ticket storage device forcibly from the terminal de- 
vice for refunding, it is possible that the aforementioned 
microprocessor of the electronic ticket storage device is 
set so as to delete the electronic ticket to be refunded 
which is stored in the electronic ticket storage area of 
the electronic ticket storage means when electronic 
money is stored in the aforementioned electronic money 
storage means so as to refund the ticket. 

As an alternative means therefor, it is possible that 
the aforementioned electronic ticket storage means of 
the electronic ticket storage device has an area for stor- 
ing an invalid flag and the aforementioned microproces- 
sor of the electronic ticket storage device makes the 
aforementioned invalid flag corresponding to the elec- 
tronic ticket to be refunded valid for refunding of the tick- 
et, and then transfers the electronic ticket to the elec- 
tronic ticket vending and refunding device, and deletes 
the electronic ticket stored in the electronic ticket stor- 
age area of the electronic ticket storage means after 
completion of transfer. 

Preferably, the electronic ticket vending and refund- 
ing method of the present invention is an electronic tick- 
et vending and refunding method for allowing ticket 
vending or refunding to a distant place using an elec- 
tronic ticket, electronic money, and a communication 
line, wherein to vend an electronic ticket, when the elec- 
tronic ticket vending and refunding device receives a 
ticket vending request from a terminal device via the 
communication line, the device sends the target ticket 
and a cost sending request therefor to the terminal de- 
vice via the communication line, receives electron mon- 
ey of the target ticket cost from the electronic ticket stor- 
age device connected to the terminal device via the 
communication line, then produces an electronic ticket 
which is requested to vend, sends the electronic ticket 
to the terminal device via the communication terminal, 
vends the electronic ticket by transferring the electronic 
ticket to the electronic ticket storage device by the ter- 
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minal device which receives the electronic ticket and to 
refund the aforementioned purchased electronic ticket, 
when the electronic ticket vending and refunding device 
receives a refunding request from the terminal device 
via the communication line, the device requests sending 5 
of the electronic ticket which is requested to refund to 
the electronic ticket storage device connected to the ter- 
minal device, receives the electronic ticket from the 
electronic ticket storage device via the communication 
line, then confirms the validity of the electronic ticket, io 
sends electronic money of the ticket refund to the termi- 
nal device via the communication line when it judges 
that the electronic ticket is valid, and refunds the elec- 
tronic ticket by transferring the electronic money to the 
electronic ticket storage device from the terminal device is 
which receives the electronic money. 

Furthermore, it is desirable that when an electronic 
ticket is vended by the aforementioned electronic ticket 
vending and refunding method, the electronic ticket 
vending and refunding device executes a step of receiv- 20 
ing electronic money from the electronic ticket storage 
device, a step of storing that the device receives the 
electronic money from the electronic ticket storage de- 
vice, a step of sending the electronic ticket to the elec- 
tronic ticket storage device, and a step of storing that 2s 
the device sends the electronic ticket to the electronic 
ticket storage device. Furthermore, to refund the afore- 
mentioned purchased electronic ticket, it is possible that 
the electronic ticket vending and refunding device exe- 
cutes a step of receiving the electronic ticket from the 30 
electronic ticket storage device, a step of storing that 
the device receives the electronic ticket from the elec- 
tronic ticket storage device, a step of sending the afore- 
mentioned electronic money to the electronic ticket stor- 
age device, and a step of storing that the device sends 35 
the electronic money to the electronic ticket storage de- 
vice. 

Furthermore, it is desirable that when an electronic 
ticket is vended by the aforementioned electronic ticket 
vending and refunding method, the electronic ticket stor- 40 
age device executes a step of sending electronic money 
to the electronic ticket vending and refunding device, a 
step of storing that the device sends the electronic mon- 
ey to the electronic ticket vending and refunding device, 
a step of receiving the electronic ticket from the elec- 45 
tronic ticket vending and refunding device, and a step 
of storing that the device receives the electronic ticket 
from the electronic ticket vending and refunding device. 

Furthermore, to refund the aforementioned pur- 
chased electronic ticket, it is desirable that the electronic so 
ticket storage device executes a step of sending the 
electronic ticket to the electronic ticket vending and re- 
funding device, a step of storing that the device sends 
the electronic ticket to the electronic ticket vending and 
refunding device, a step of receiving the electronic mon- 55 
ey from the electronic ticket vending and refunding de- 
vice, and a step of storing that the device receives the 
electronic money from the electronic ticket vending and 



refunding device. 

Preferably, the present invention having the afore- 
mentioned constitution has the function and operation 
indicated below. 

The operations of the electronic ticket vending and 
refunding system and the vending and refunding meth- 
od thereof of the present invention will be explained 
hereunder for (1) a case of purchasing a ticket, (2) a 
case of confirming the content of a ticket, and (3) a case 
of refunding a ticket. 

(1 ) Case of purchasing a ticket 

When a ticket purchaser purchases a ticket, he op- 
erates a terminal device connected to a communication 
line such as a telephone line and calls out an electronic 
ticket vending and refunding device, that is, a computer 
of a ticket publisher (or a ticket vender). The electronic 
ticket vending and refunding device sends a menu of 
tickets which can be sold to the terminal device via the 
communication line. The terminal device receives the 
menu and displays it on the display means. When the 
ticket purchaser selects the ticket to be purchased using 
the input means of the terminal device and then inputs 
necessary conditions such as the number of tickets, 
these data are sent to the electronic ticket vending and 
refunding device via the communication line. 

The electronic ticket vending and refunding device 
checks whether the ticket can be vended. When the tick- 
et can be vended, the device calculates the ticket cost 
and sends a sending request command to the terminal 
device. According to this request, the terminal device 
instructs the ticket purchaser to insert the electronic tick- 
et storage device into the terminal device. In this case, 
a contact or non-contact type IC card may be used for 
the electronic ticket storage device. When a non-contact 
type IC card is used, electromagnetic waves such as 
infrared light or radio waves or ultrasonic waves are 
used for communication, so that there is no need to in- 
sert the IC card into the terminal device and it is desir- 
able to bring the IC card close to the terminal device. 
When the ticket purchaser inputs a sending permission 
response from the input means of the terminal device, 
the response is sent to the electronic ticket vending and 
refunding device from the terminal device. The electron- 
ic ticket vending and refunding device receiving the re- 
sponse sends a sending command to the electronic tick- 
el storage device via the terminal device. To prevent for- 
gery or illegal reproduction of electronic money due to 
interception of the communication content of the elec- 
tronic money, it is possible to use the sending procedure 
using the encryption art described in Published Unex- 
amined Patent Application 5-504643 of the prior art. 
When the electronic ticket storage device sends the 
electronic money and then receives confirmation of re- 
ception of the electronic money from the electronic ticket 
vending and refunding device, the electronic ticket stor- 
age device records the ID of the opposite of sending 
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(identifier), sent money, and completion of sending in 
the I/O history of electronic tickets and electronic money, 
that is, the transaction history. 

Next, when the electronic ticket storage device 
sends completion ol recording and the electronic ticket 
vending and refunding device receives it, the electronic 
ticket vending and refunding device produces an elec- 
tronic ticket and then sends the electronic ticket to the 
terminal device. In this case, the electronic ticket in- 
cludes ticket information such as the ticket name, pub- 
lication source, date, and transaction sequence number 
and an electronic signature for proving the validity of the 
information An electronic signature is data in which the 
whole or a part of ticket information is encrypted by using 
the secret key of an asymmetric encryption algorithm 
which is allocated tc each ticket publisher beforehand. 
As a method lor exacting a part of data from the afore- 
mentioned ticket information there is a method using 
the hash function As an alternative idea, a method for 
constituting an electronic tcket only by data in which the 
whole of the ticket mlormntion is enciypled by the afore- 
mentioned secret key may be used 

The constitution of the electronic ticket storage 
means of the electronic ticket storage device varies with 
the data structure of an electronic ticket. One is a con- 
stitution having an aroa lor storing unencrypted ticket 
information and an area for storing an electronic signa- 
ture and the other is a constitution having an area for 
storing ticket information in which all the statements are 
encrypted and an area for storing a public key which 
forms a counterpart to the secret key which encrypts tne 
aforementioned ticket information. In the former case, 
the electronic ticket vending and refunding device sends 
the unencrypted ticket information data and the elec- 
tronic signature to the terminal device and in the latter 
case : it sends the ticket information data in which all the 
statements are encrypted and the public key which 
forms a counterpart to the secret key to the terminal de- 
vice. 

For an electronic ticket having one of the aforemen- 
tioned data structures, the terminal device transfers the 
received data to the electronic ticket storage device and 
the electronic ticket storage device stores the received 
data in the electronic ticket storage means. When the 
data is stored in the electronic ticket storage means, the 
electronic ticket storage device records in the transac- 
tion history storage means that the electronic ticket is 
received. 

Also as to transmission or reception of an electronic 
ticket, in the same way as transmission or reception of 
electronic money, by using the communication proce- 
dure described in Published Unexamined Patent Appli- 
cation 5504643 mentioned above, forgery or illegal re- 
production of an electronic ticket due to interception of 
the communication content can be prevented. 



10 

(2) Case of confirming the content of a ticket 

When a ticket purchaser confirms the content of the 
purchased ticket by the terminal device, he inputs a tick- 
5 et data display command to the terminal device. When 
the terminal device receives the command, it sends a 
command for reading unencrypted data to the electronic 
ticket storage device via the communication line such 
as a telephone line. When the stored electronic ticket 
10 comprises unencrypted ticket data information and an 
electronic signature, the electronic ticket storage device 
returns only unencrypted data to the terminal device for 
this reading command and when the stored electronic 
ticket comprises data in which all the statements are en- 
*5 crypted and a public key, the electronic ticket storage 
device returns the result which is obtained by decrypting 
the ticket data in which all the statements are encrypted 
by the public key to the terminal device. The terminal 
device displays the received unencrypted ticket infor- 
ms maiion daia on the display unit of the terminal device. 

As mentioned above, the terminal device basically 
provides an interface between a ticket purchaser, the 
electronic ticket storage device, and the electronic ticket 
vending and refunding device connected via the com- 
2S munication line. The encryption process for an electron- 
ic ticket and electronic money which is executed for 
communication with the electronic ticket vending and re- 
funding device can prevent forgery and illegal reproduc- 
tion of an electronic ticket and electronic money and al- 
so teration of a transaction history by concealing the en- 
cryption process by allowing the electronic ticket stor- 
age device to execute it. As a result, the transaction his- 
tory can increase the proving ability for transfer of an 
electronic ticket and electronic money 

35 

(3) Case of refunding a ticket 

Next, to refund the purchased ticket, the ticket pur- 
chaser calls out the electronic ticket vending and ref und- 

40 ing device from which the ticket is purchased by the ter- 
minal device via the communication line such as a tele- 
phone line and selects Ticket Refunding by the service 
kind selection menu. The terminal device reads and dis- 
plays a list of electronic tickets stored in the electronic 

45 ticket storage device. When the ticket purchaser selects 
the ticket to be refunded, the terminal device sends the 
corresponding electronic ticket number to the electronic 
ticket vending and refunding device. The electronic tick- 
et vending and refunding device sends a request com- 

so mand for sending the electronic ticket of the correspond- 
ing ticket number to the electronic ticket storage device 
via the terminal device. When the electronic ticket stor- 
age device receives reception confirmation of the cor- 
responding electronic ticket from the electronic ticket 

55 vending and refunding device after it sends the corre- 
sponding electronic ticket to the electronic ticket vend- 
ing and refunding device, the electronic ticket storage 
device records in the transaction history storage area of 
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the electronic ticket storage device that it sends the ID 
of the opposite of sending and the aforementioned elec- 
tronic ticket. 

In this case, if an area for storing an invalid flag is 
provided in the electronic ticket storage area, the flag is 
turned ON and the corresponding ticket is made invalid. 
The reason is that if the data of an electronic ticket to 
be sent is deleted, and a communication failure occurs, 
and hence a ticket purchaser cannot receive the refund, 
the evidence indicating the content of the stored elec- 
tronic ticket is prevented from missing and if a valid ticket 
is left as it is, a status that the electronic ticket storage 
device is disconnected forcibly from the terminal device 
at the same time that the ticket purchaser receives the 
electronic money and both the valid ticket and the refund 
are retained is prevented from occurrence. However, 
the aforementioned invalid flag may be used or may not 
be used. When an invalid flag is not used or is not pro- 
vided, a saving area for ticket data and an electronic 
signature is provided in the electronic ticket storage 
means beforehand and the ticket data is made invalid 
by storing it in the saving area. Namely, it is desirable to 
store the ticket data with an electronic signature to be 
sent in the saving area immediately before starting 
sending of the electronic ticket, delete the aforemen- 
tioned ticket data existing in the ticket storage area, and 
then send the ticket data. 

On the other hand, the electronic ticket vending and 
refunding device receiving the electronic ticket records 
in the transaction history storage means of the electron- 
ic ticket vending and refunding device that it receives 
the electronic ticket. Next, the electronic ticket vending 
and refunding device confirms the validity of the sent 
electronic ticket using the public key which forms a 
counterpart to the secret key which electronically signs 
the ticket retained by the electronic ticket vending and 
refunding device. When the electronic ticket vending 
and refunding device judges that the electronic ticket is 
valid, it calculates the refund from the ticket cost and the 
ticket refunding commission and sends electronic mon- 
ey equal to the refund to the terminal device. If this oc- 
curs, the electronic ticket vending and refunding device 
records sending of the electronic money and the amount 
thereof in the transaction history storage means ol the 
electronic ticket vending and refunding device. 

When the electronic storage device receives the 
electronic money sent from the electronic ticket vending 
and refunding device via the terminal device, it accumu- 
lates the sent electronic money to the amount of money 
stored in the electronic ticket storage means and 
records reception of the electronic money and the 
amount thereof in the transaction history of the electron- 
ic ticket storage device and then deletes the electronic 
ticket to be refunded. It there is an area for storing an 
invalid flag in the electronic ticket storage area in this 
case the electronic storage device turns the invalid flag 
OFF Furthermore, the electronic ticket storage device 
puts the item in the I/O history relating to the deleted 



electronic ticket into the deletable state. As a method 
thereof, there is a method for providing a deletable flag 
for each item in the transaction history and turning the 
deletable flag ON when it becomes deletable. The 
5 invalid flag is turned OFF when the item in the transac- 
tion history corresponding to the deletable flag is delet- 
ed. By doing this, the transaction history cannot be de- 
leted while an electronic ticket exists in the electronic 
ticket storage means, so that a trouble due to alteration 
10 of the transaction history can be prevented. When trans- 
action histories are accumulated up to the storage ca- 
pacity, it is desirable to delete deletable histories se- 
quentially. 

As a method for checking the validity of an electron- 
ic ticket other than a method, as mentioned above, for 
transferring an electronic ticket to the electronic ticket 
vending and refunding device from the electronic ticket 
storage device and checking the validity by the electron- 
ic ticket vending and refunding device, there is a method 
for sending unencrypted ticket information to the elec- 
tronic ticket vending and refunding device from the elec- 
tronic ticket storage device, producing an electronic sig- 
nature from the ticket information sent from the electron- 
ic ticket vending and refunding device, sending the elec- 
tronic signature to the electronic ticket storage device, 
and judging the validity by the electronic ticket storage 
device. To realize the method, it is desirable to provide 
a means for checking for the identity of the electronic 
signature sent to the electronic ticket storage device 
with the electronic signature retained by the electronic 
ticket storage device. 

If a gate device having a public key which forms a 
counterpart to the secret key used to produce an elec- 
tronic signature is installed in the entrance gate of an 
installation using tickets actually and the electronic tick- 
et storage device is inserted into or located in the neigh- 
borhood of the gate device for use, paperless tickets can 
be used. 

The foregoing and other objects, advantages, man- 
ner of operation and novel features of the present inven- 
tion will be understood from the following detailed de- 
scription when read in connection with the accompany- 
ing drawings. 

Fig. 1 is an overall block diagram showing an em- 
bodiment of the electronic ticket vending and refunding 
system of the present invention. 

Fig. 2 is a block diagram showing the rough consti- 
tution of the electronic ticket vending and relunding de- 
vice shown in Fig. 1. 

Fig. 3 is a block diagram showing en embodiment 
of the terminal device shown in Fig. 1 . 

Fig. 4 is a schematic diagram showing the constitu- 
tion of the electronic ticket storage device shown in Fig. 
1. 

Fig. 5 is a flow chart showing an embodiment of the 
processing procedure for purchasing an electronic ticket 
using the electronic ticket vending and refunding system 
shown in Fig. 1 . 
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Fig. 6 is an illustration showing operation screen ex- 
amples displayed on the display device of the terminal 
device shown in Fig. 3 according to the processing pro- 
cedure tor purchasing an electronic ticket. 

Fig. 7 is a data configuration diagram showing a 
content example of a transaction history file in the elec- 
tronic ticket vending and refunding device shown in Fig. 
2 when an electronic ticket is purchased. 

Fig. 8 is a data configuration diagram showing a 
content example of a transaction history storage area in 
the electronic ticket storage device shown in Fig. 4 when 
an electronic ticket is purchased. 

Fig. 9 is a data configuration diagram showing a 
content example of a ticket information file of the elec- 
tronic ticket vending and refunding device shown in Fig. 
2. 

Fig. 10 is a data configuration diagram showing an 
example of the constitution of an electronic ticket stor- 
age area in the electronic ticket storage device shown 
in Fig. 4. 

Fig. 11 is a data configuration diagram showing an- 
other example of the constitution of an electronic ticket 
storage area in the electronic ticket storage device 
shown in Fig. 4. 

Fig. 12 is a flow chart showing an embodiment of 
the processing procedure for refunding an electronic 
ticket using the electronic ticket vending and refunding 
system of the present invention. 

Fig 13 is an illustration showing operation screen 
examples displayed on the display device of the terminal 
device shown in Fig. 3 according to the processing pro- 
cedure for refunding an electronic ticket. 

Fig. 14 is a data configuration diagram showing a 
content example of a transaction history file in the elec- 
tronic ticket vending and refunding device shown in Fig. 
2 when an electronic ticket is refunded. 

Fig. 15 is a data configuration diagram showing a 
content example of a transaction history storage area in 
the electronic ticket storage device shown in Fig. 4 when 
an electronic ticket is refunded. 

Fig. 16 is a block diagram showing another embod- 
iment of a terminal device used in the electronic ticket 
vending and refunding system of the present invention. 

Fig. 17 is an illustration showing operation screen 
examples displayed when the information stored in the 
electronic ticket storage device shown in Fig. 4 is con- 
firmed. 

An embodiment of the electronic ticket vending and 
refunding system and the vending and refunding meth- 
od thereof of the present invention will be explained in 
detail hereunder by referring to the accompanying draw- 
ings. 

Fig. 1 is a block diagram showing the whole consti- 
tution of the electronic ticket vending and refunding sys- 
tem of the present invention. Reference code 1 indicates 
an electronic ticket vending and refunding device re- 
tained by a ticket publisher and a plurality of electronic 
ticket vending and refunding devices 1 are connected 



to a telephone line 4 respectively. A plurality of terminal 
devices 3 having a man-machine interface which are 
used and operated when a ticket purchaser purchases 
or refunds a ticket are connected to the telephone line 
s 4. Electronic ticket storage devices 2 retained by ticket 
purchasers respectively are connected to the terminal 
devices 3 by physical interfaces (not shown in the draw- 
ing) in contact or non-contact so as to execute two-way 
communication. 
10 As mentioned above, the electronic ticket vending 
and refunding system of the present invention is a sys- 
tem comprising a plurality of electronic ticket vending 
and refunding devices 1 connected to the telephone line 
4, a plurality of terminal devices 3, and a plurality of elec- 
ts tronic ticket storage devices 2 which can be connected 
to the terminal devices 3 in contact or non-contact. As 
a means for connecting each ol the terminal devices 3 
in non-contact, electromagnetic waves such as radio 
waves or infrared light or ultrasonic waves are used and 
20 as a means for realizing the electronic ticket storage de- 
vices 2, an IC card (also called a smart card) can be 
used. 

The more detailed constitution of each of the devic- 
es 1 to 3 constituting the aforementioned electronic tick- 

25 et vending and refunding system will be explained here- 
under with reference to Figs. 2 to 4. 

Firstly, the constitution ol the electronic ticket vend- 
ing and refunding device 1 is shown in Fig. 2. The elec- 
tronic ticket vending and refunding device 1 comprises 

30 a storage device 11, a display device 18 and an input 
device 1 9 which are used to confirm the vending condi- 
tion of tickets and add new ticket information, a commu- 
nication device 20 for communicating with the electronic 
ticket storage devices 2 using a communication line 

35 such as a telephone line, and a microprocessor (CPU) 
21 . Furthermore, to this electronic ticket vending and re- 
funding device 1, a large capacity storage device (not 
shown in the drawing) such as a hardware disk which 
stores a ticket information file 16 for storing information 

40 on whether tickets can be vended and the ticket price 
and a transaction history file 17 for recording a history 
when electronic money and an electronic ticket are 
transmitted to or received from the electronic ticket stor- 
age devices 2 is connected via a bus line 10. When the 

45 electronic ticket vending and refunding device 1 has a 
built-in large capacity storage device, it is desirable to 
store the ticket information file 16 and the transaction 
history file 17 in it. As shown in Fig. 2, the storage device 
11 comprises an electronic money storage area 12, an 

50 area 1 3 for storing an encryption key used to sign ticket 
information data electronically, an area 14 for storing a 
program, and a working area 15. The CPU 21 controls 
the aforementioned devices 11 to 20 constituting the 
electronic ticket vending and refunding device 1 accord- 

ss jng to the program stored in the program storage area 
of the storage device 1 1 . The communication method of 
the communication device 20 may be wire communica- 
tion or radio communication. 
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Next, the constitution of the terminal device 3 is 
shown in Fig. 3. The terminal device 3 comprises an in- 
put device 22 for inputting data, a display device 23 for 
displaying data, a communication device 24 for commu- 
nicating with the electronic ticket vending and relunding s 
device 1 using a communication line such as a tele- 
phone line, a storage device 25, an IC card reader/writer 
(hereinafter abbreviated to IC card R/W) 26 for commu- 
nicating with an IC card 30 comprising an electronic tick- 
et storage device 2 formed on the IC chip, and a CPU 10 
27 for controlling the aforementioned devices 22 to 26. 

Fig. 4 shows the constitution of the electronic ticket 
storage device 2. The electronic ticket storage device 2 
formed on the IC chip comprises a storage unit 31 for 
storing data and a program, an external I/O interface 37 is 
for connecting the IC card R/W 26 of the terminal device 
3 physically, and a CPU 38 for processing in accordance 
with the program stored in the storage unit 31 . Further- 
more, the storage unit 31 comprises an electronic ticket 
storage area 32, an electronic money storage area 33, ?o 
a program storage area 34, a transaction history storage 
area 35 for storing records of transmission and recep- 
tion of an electronic ticket and electronic money and a 
working area 36. 

The vending and refunding method of the electronic 25 
ticket vending and refunding system of the present in- 
vention will be explained hereunder lor (1 ) a case of pur- 
chasing a ticket newly, (2) a case of refunding a pur- 
chased ticket, and (3) a case of confirming the content 
of a purchased ticket by using the devices 1 to 3 having 30 
the aforementioned constitution. 

(1 ) Case of purchasing a ticket newly 

Fig. 5 is a flow chart showing the outline of the 35 
processing procedure for purchasing an electronic ticket 
using the electronic ticket vending and refunding system 
shown in Fig. 1 . 

To purchase an electronic ticket, a ticket purchaser 
calls out the electronic ticket vending and refunding de- *o 
vice 1 of a ticket publisher handling the ticket to be pur- 
chased by using the terminal device 3 (Step 210). When 
the electronic ticket vending and refunding device 1 is 
called out via the telephone line 4, it sends the initial 
menu via the telephone line 4 (Step 220). When the ter- 45 
minal device 3 receives the initial menu, the terminal de- . 
vice 3 displays it on the display device 23 and waits for 
input from the ticket purchaser. 

Fig. 6 shows operation screen examples displayed 
on the display device 23 when a ticket is purchased. In so 
Fig. 6, reference code 510 indicates an initial menu 
screen. When the ticket purchaser inputs "1 M indicating 
ticket vending from the input device 22. the data is sent 
to the electronic ticket vending and refunding device 1 
via the telephone line 4 (Step 230). 55 

When the electronic ticket vending and relunding 
device 1 receives it, the electronic ticket vending and 
refunding device 1 sends a ticket menu screen 520 



showing the content of the game (competitor team, 
match date, etc.) to the terminal device 3 via the tele- 
phone line. If the ticket purchaser looks at the ticket 
menu and purchases, for example, a ticket for the June 
2nd match of teams A to B, when "2° is inputted, the 
input is informed of the electronic ticket vending and re- 
funding device 1 via the telephone line. In the same way 
hereinafter, when "1 n indicating reserved seat A is input- 
ted for a screen 530 showing seat kinds and for exam- 
ple, 2 tickets are to be purchased for a screen 540 show- 
ing the number of tickets, B 2 M is inputted. As a result, the 
electronic ticket vending and refunding device 1 checks 
whether the ticket requested by the ticket purchaser can 
be vended and when it can be vended, the electronic 
ticket vending and refunding device 1 calculates the tick- 
et cost and sends the result to the terminal device 3. The 
terminal device 3 displays the received content (the con- 
tent of the purchased ticket, the number of tickets, cost, 
confirmation thereof, etc.) on a screen 550 and when 
the ticket purchaser inputs "1", the terminal device 3 
sends it to the electronic ticket vending and refunding 
device 1 . When the ticket cannot be vended, the elec- 
tronic ticket vending and refunding device 1 sends that 
effect to the terminal device 3 and asks the ticket pur- 
chaser if he will purchase another ticket. When the ticket 
purchaser wants to purchase another ticket, the terminal 
device 3 displays the ticket menu screen 520 showing 
the game content again. In this case, the electronic tick- 
et vending and refunding device 1 may ask the ticket 
purchaser the screen to be displayed (Steps 240, 250) 

When the electronic ticket vending and refunding 
device 1 receives it, the device presses the terminal de- 
vice 3 to insert the electronic ticket storage device (IC 
card) 2 into the terminal device 3 (screen 560). When 
the electronic ticket storage device 2 is a non-contact 
IC card, it is desirable to bring the electronic ticket stor- 
age device 2 close to the terminal device 3. When the 
ticket purchaser inserts the electronic ticket storage de- 
vice 2 into the IC card R/W 26 of the terminal device 3, 
the terminal device 3 informs the electronic ticket vend- 
ing and refunding device 1 that the electronic ticket stor- 
age device 2 is inserted. The electronic ticket vending 
and refunding device 1 sends a request command for 
sending a ticket cost of 7400 yen to the electronic ticket 
storage device 2 via the terminal device 3 (Step 260). 
When the processing procedure from Step 260 to Step 
470 is in execution hereafter, the display device 23 of 
the terminal device 3 displays "Under Processing" like 
a screen 570 shown in Fig. 6. 

In this case, as an encryption method for sending 
electronic money, the method used for sending between 
electronic purses which is disclosed in Published Unex- 
amined Patent Application 5-504643 described in the 
conventional example is used. This method wilt be ex- 
plained briefly hereunder. In the method, an asymmetric 
encryption algorithm represented by the RSA system is 
used. Each electronic purse retains a global public key 
Pg which is shared by all the electronic purses, a local 
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secret key Sli which is intrinsic to each electronic purse, 
a local public key PIL and Pli*Sg which is obtained by 
encrypting the local public key Pli by a global secret key 
Sg. A symbol * indicates encryption or decryption, and 
the preceding of the symbol * indicates data to be en- 
crypted or decrypted, and the subsequent of the symbol 
* indicates a key used for encryption or decryption. As- 
suming the local secret key of the electronic purse on 
the sending side as S1 s and the local public key thereof 
as P1s and the local secret key of the electronic purse 
on the receiving side as Sir and the local public key 
thereof as P1 r, the electronic purse on the receiving side 
sends P1r*Sg+R*S1r to the electronic purse on the 
sending side. A symbol R indicates a message on the 
receiving side including transaction identification, trans- 
action sequence number, and data (data of an amount 
ol money since money is sent in this example). When 
the electronic purse on the sending side receives it, the 
electronic purse on the sending side acquires the local 
public key Plr using Ihe global public key Pg retained 
by the electronic purse on the sending side and acquires 
the message R on the receiving side including transac- 
tion identification, transaction sequence number, and 
data of an amount of money using the local public key 
Plr. The electronic purse on the sending side acquires 
the data of an amount of money to be sent from the mes- 
sage R and subtracts the amount of money from the 
electronic money stored in the storage unit of the elec- 
tronic purse on the sending side. Next, the electronic 
purse on the sending side produces a message VR on 
the sending side which includes the amount of money 
to be sent, the transaction identification, and the mes- 
sage R and then sends P1s*Sg+VR*Slsto the electron- 
ic purse on the receiving side. The electronic purse on 
the receiving side acquires the local public key P1s on 
the sending side using the global public key Pg retained 
by itself, acquires the message VR on the sending side 
using the local public key P1 s, checks whether the mes- 
sage R sent by itself is included in the message VR, and 
when it is valid, increases the electronic money stored 
in the storage unit of the electronic purse on the receiv- 
ing side by the amount of money included in the mes- 
sage VR. Finally, the electronic purse on the receiving 
side informs the electronic purse on the sending side 
that the process ends normally. By this series of steps, 
electronic money is sent or received between the elec- 
tronic purses safely 

The explanalion will be restarted by referring to 
Figs. 5 and 6 again. Assuming that the electronic purse 
on the receiving side is the electronic ticket vending and 
refunding device 1 and the electronic purse on the send- 
ing side is the electronic ticket storage device 2, a ticket 
cost of 7400 yen can be sent to the electronic ticket 
vending and refunding device 1 from the electronic ticket 
storage device 2 safely according to the sending proce- 
dure of the aforementioned conventional example. The 
electronic ticket storage device 2 receives data sent 
from the electronic ticket vending and refunding device 



1 from the external I/O interface 37 via the IC card R/W 
of the terminal device 3 (Step 270), decrypts the sent 
data, subtracts the sent request amount of money from 
the amount of electronic money in the electronic money 

5 storage area 33, encrypts the amount of money, and 
then sends it to the electronic ticket vending and refund- 
ing device 1 (Step 280). 

When the electronic ticket vending and refunding 
device 1 receives the electronic money of 7400 yen from 

10 the electronic ticket storage device 2 (Step 300), it 
checks for the validity of the received electronic money, 
accumulates 7400 yen in the electronic ticket storage 
area 12 (Step 310), and registers, for example, "Trans- 
action No. 345123, 7400 yen is received" in the trans- 

15 action history file 17 (Step 320). Fig. 7 shows an exam- 
ple of the content of the transaction history file 17 of the 
electronic ticket vending and refunding device 1 . Trans- 
action history data 650 of the transaction history file 17 
comprises "transaction #' data indicating the transac- 
ts iion sequence number, "object" data indicating money 
or a ticket, "sent/received" data indicating whether an 
object is sent or received, "content" data indicating the 
amount of money or the content of a ticket, and "deleta- 
ble flag" data indicating whether the transaction history 

25 can be deleted or not. 

Next, the electronic ticket vending and refunding 
device 1 sends a notification of acknowledgment of re- 
ception of electronic money (Step 330). When the CPU 
38 of the electronic ticket storage device 2 receives the 

30 notification of reception of electronic money from the 
electronic ticket vending and refunding device 1 via the 
terminal device 3 (Step 340), the CPU 38 registers 
V400 yen is sent for professional baseball A" in the 
transaction history storage area 35. Professional base- 

35 ball A is ID of the electronic ticket vending and refunding 
device 1 (Step 350). Fig. 8 shows the content of the 
transaction history storage area 35. Transaction history 
storage data 630 in the transaction history storage area 
35 comprises ID of an opposite of communication, "ob- 

40 ject" data indicating money or a ticket, "sent/received" 
data indicating whether an object is sent or received, 
"content" data indicating the amount of money or the 
content of a ticket, and "deletable flag" data indicating 
whether the transaction history can be deleted or not. 

Next, the electronic ticket vending and refunding 
device 1 produces ticket information data 610 compris- 
ing a ticket publication source, an event name, a day 
and lime, a place name, a seat number, and a serial 
number (Step 370) and updates the ticket information 

50 fj(e 16 (Step 380). Fig. 9 shows a configuration example 
of the ticket information data 61 0 registered in the ticket 
information file 16. 

It is necessary that a ticket publisher signs the ticket 
information data 610 electronically for prevention of for- 

55 gery. As a method for electronic signature, an asymmet- 
rical encryption algorithm is used. Each ticket publisher 
retains a secret key STk which varies with a ticket pub- 
lisher and a public key PTk corresponding to it. For elec- 
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tronic signature, the whole or a part of the ticket infor- 
mation data 610 is encrypted by the secret key STk be- 
forehand. To produce an electronic signature using a 
part of the ticket information data 61 0, it is desirable to 
acquire a part of the original data using the hash function $ 
and then encrypt STk. In the electronic ticket storage 
area 32 of the electronic ticket storage device 2, the tick- 
et information data 610 and the electronic signature are 
stored. The constitution of ticket storage data 620 in the 
electronic ticket storage area 32 is shown in Fig. 1 0. The 1 o 
ticket storage data 620 comprises a ticket number, an 
unencrypted ticket information data 610, an electronic 
signature, and an invalid flag. As an alternative idea, like 
ticket storage data 640 having the constitution shown in 
Fig. 1 1 , it is possible to store data which is obtained by is 
encrypting the whole ol the ticket information data 610 
by the secret key STk and a public key PTk which forms 
a counterpart to the secret key STk in the electronic tick- 
et storage area 32. 

Hereinafter, in the case of the ticket data shown in 20 
Fig. 10, a combination of the ticket information data 610 
and an electronic signature is called an electronic ticket 
and in the case of the ticket data shown in Fig. 11, the 
ticket information data 610 which is encrypted entirely 
and signed electronically is called an electronic ticket. 2S 

To judge the validity of an electronic ticket, when the 
electronic ticket has the constitution shown in Fig. 10, it 
is desirable to compare data in which the electronic sig- 
nature is decrypted by using the public key PTk and the 
ticket information data 61 0 so as to check for identifica- 30 
tion. To produce an electronic signature using a part of 
the ticket information data 61 0, it is desirable to compare 
data in which the electronic signature is decrypted by 
the public key PTk and data which is obtained by ex- 
tracting a part of the ticket information data 610 by using 35 
the same hash function as that used when the electronic 
signature is produced so as to check for identification. 

When an electronic ticket has the constitution 
shown in Fig. 11 : the electronic ticket is decrypted by 
using a public key PTk which forms a counterpart to a 40 
secret key STk retained by a device for deciding the va- 
lidity and the validity is judged depending on whether 
the resultant data can be interpreted by the electronic 
ticket vending and refunding device 1 or not. As to 
whether interpretable or not, when the data decrypted 45 
by the electronic ticket vending and refunding device 1 
is removed in the predetermined format, and the data 
removed by the electronic ticket vending and refunding 
device 1 is collated with the data which is retained be- 
forehand, and a match is found, the data is interpretable. so 
When no match is found, the data is uninterpretable. 
The public key PTk retained by the electronic ticket stor- 
age device 2 is used only for decrypting encrypted ticket 
information data by the electronic ticket storage device 
2 when the content of an electronic ticket is confirmed 55 
by the terminal device 3 having no encryption mecha- 
nism. In this embodiment, the electronic ticket vending 
and refunding device 1 encrypts the whole or a part of 



the ticket information data 610 using the secret key ST1 
(k=1 in this embodiment) and produces an electronic 
signature. 

Next, in the same communication procedure as that 
of sending of electronic money, the communication con- 
tent is encrypted and the electronic ticket is sent to the 
electronic ticket storage device 2 (Step 390). In this 
case, the secret key and public key to be used for en- 
cryption may be or may not be the same as those used 
for electronic money. In this embodiment, the global se- 
cret key for the electronic ticket storage devices 2 is 
STg, and the global public key is PTg, and the local se- 
cret key ST1i which varies with each electronic ticket 
storage device 2 is ST1 i, and the local public key is PT1 i 
and each ticket storage device 2 retains ST1i, PTli, 
PTg, and P1 i*STg. The host computer of the ticket pub- 
lisher, that is, the electronic ticket vending and refunding 
device 1 retains STH PT1I, PTg, PT1i*STg, and STi. 
The global secret key STg is managed under strict man- 
agement of a generalizing manager of the electronic 
ticket system. A generalizing system manager is a man- 
ager of the ticket vending and refunding network system 
and a supplier of an IC card (electronic ticket storage 
device 2) and software for the host computer (electronic 
ticket vending and refunding device 1 ) and the manager 
manages the global secret key of the encryption algo- 
rithm which is used by a user of the network for commu- 
nication. A ticket vender receives the ticket vending and 
refunding software for host computer from the network 
system manager and a ticket purchaser receives an IC 
card from the network system manager. When the elec- 
tronic ticket key is the same as the electronic money key, 
it is desirable to set STg=Sg, PTg=Pg, ST1i=S1i, and 
PT1 i=P1 i. In the electronic ticket vending and refunding 
device 1 in this embodiment, i=1 and in the electronic 
ticket storage device 2, i=2. 

The communication procedure between the elec- 
tronic ticket storage device 2 and the electronic ticket 
vending and refunding device 1 will be explained here- 
under for the two cases which are divided depending on 
the form of an electronic ticket. 

(a) When an electronic ticket comprises unencrypted 
ticket information data and an electronic signature. 

The electronic ticket vending and refunding device 
1 sends an electronic ticket reception preparation com- 
mand to the electronic ticket storage device 2. Upon re- 
ceipt of it, the electronic ticket storage device 2 sends 
PTl2*STg+R*ST12 as an electronic ticket sending re- 
quest via the telephone line 4. In this case, the message 
R includes transaction identification, transaction se- 
quence number, and ticket data. The electronic ticket 
vending and refunding device 1 acquires the local public 
key PT12 using the retained global public key PTg and 
acquires the message R using the public key PT1 2. The 
electronic ticket vending and refunding device 1 produc- 
es a message VR including R from the ticket information 
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data, tn<} electronic signature, and the message R and 
then F-.ds encrypted data of PT11*STg-+A/R*ST11 to 
the terminal device 3. The terminal device 3 which re- 
ceives it via the telephone line transfers 
PT1 1 *STg+VR*ST1 1 to the electronic ticket storage de- 
vice 2 via the IC card R/W 26. The electronic ticket stor- 
age device 2 acquires the encrypted data of 
PT11*STg+VR*ST11 via the external I/O interlace 37 
and the microprocessor 38 decrypts the acquired en- 
crypted data by the following procedure. 

Firstly, the microprocessor 38 acquires the local 
public key PT11 using the global public key PTg and ac- 
quires the message VR using the local public key PRII. 
The microprocessor 38 acquires the message R, the 
ticket information data 610, and the electronic signature 
from the message VR and checks the validity of R by 
checking whether the message R which is sent from the 
electronic ticket storage device 2 before is included or 
not, and then stores the ticket information data 610 and 
the electronic signature in the electronic ticket storage 
area 32. When the electronic ticket storage area 32 can 
store a plurality of electronic tickets, the electronic ticket 
storage area 32 identifies the area storing the electronic 
tickets by the number thereof and stores the electronic 
tickets in the storage area of the number (1 in this case). 
The electronic ticket storage area 32 may store only one 
electronic ticket and in this case, there is no need to 
identify the electronic ticket by the aforementioned 
number. 

The next processing procedure of Step 390 men- 
tioned above will be explained by referring to Figs. 5 and 
6 again. 

When the electronic ticket storage device 2 re- 
ceives the electronic ticket (Step 410) via the terminal 
device 3 (Step 400) and stores the electronic ticket in 
the electronic ticket storage area 32 (Step 420), the 
electronic ticket storage device 2 registers u #1 electron- 
ic ticket is received from professional baseball A" in the 
transaction history storage area 35 (Step 430) and then 
notifies the electronic ticket vending and refunding de- 
vice 1 of acknowledgment of reception of the electronic 
ticket (Step 440). When there exists only one electronic 
ticket storage area 32, it is possible to register the area 
number where the electronic ticket is stored or not. 

When the electronic ticket vending and refunding 
device 1 receives the acknowledgment of reception 
(Step 460) via the terminal device 3 (Step 450), the elec- 
tronic ticket vending and refunding device 1 registers 
"two tickets (2-56, 2-57) of reserved seats A for June 
2nd match (6/2) for transaction #345123 are published" 
in the transaction history file 17 as shown in the trans- 
action history data 650 in Fig. 7. In this case, transaction 
#3451 23 may bo a ticket publication serial number. 

The electronic ticket vending and refunding device 
1 sends a notification of service completion to the ter- 
minal device 3 (Step 470), and the terminal device 3 dis- 
plays it on the display device 23 (screen 580) (Step 480), 
and then the communication is completed (Step 490). 



(b) When an electronic ticket comprises only data in 
which the whole of the ticket information data is 
encrypted and signed electronically 

s In the same way as with the data constitution in (a), 

the electronic ticket vending and refunding device 1 
sends an electronic ticket reception preparation com- 
mand to the electronic ticket storage device 2 and upon 
receipt of it, the electronic ticket storage device 2 sends 

10 encrypted data of PT1 2*STg+R*ST1 2 to the electronic 
ticket vending and refunding device 1 via the telephone 
line 4. The electronic ticket vending and refunding de- 
vice 1 acquires the message R from the aforementioned 
encrypted data and then produces a message VR tn- 

15 eluding R from the electronic ticket which is produced 
by encrypting the whole of the ticket information data by 
the secret key ST1 , the message R, and the public key 
PT1 which forms a counterpart to the secret key ST1 
and sends encrypted data of PT11 *STg+VR*PT1 1 to the 

20 electronic ticket storage device 2 (Step 390). When the 
electronic storage device 2 receives the encrypted data 
(Step 41 0) via the terminal device 3 (Step 400), the CPU 
38 acquires the message VR from the encrypted data 
in the same procedure as that in (a), acquires the mes- 

2S sage R : the electronic ticket encrypted by the secret key 
ST1, and the electronic signature from this acquired 
message VR, checks the validity of R by checking 
whether R which is sent from the electronic ticket stor- 
age device 2 before is included or not, and then stores 

30 the acquired encrypted electronic ticket data and the 
public key PT1 in the electronic ticket storage area 32 
as the ticket storage data 640 as shown in Fig. 11 (Step 
420). In the same way as with the case in (a), the elec- 
tronic ticket storage area 32 may store only one elec- 
35 tronic ticket or a plurality of electronic tickets. 

When the storing process into the electronic ticket 
storage area 32 is completed normally in the same way 
as with the case in (a), the electronic ticket storage de- 
vice 2 registers n #1 electronic ticket is received from pro- 

40 fessional baseball A" in the transaction history storage 
area 35 (Step 430) and then sends acknowledgment of 
reception to the electronic ticket vending and refunding 
device 1 (Step 440). When the electronic ticket vending 
and refunding device 1 receives the acknowledgment of 

45 reception via the terminal device 3 (Step 450), the elec- 
tronic ticket vending and refunding device 1 registers 
"two tickets (2-56, 2-57) of reserved seats A for June 
2nd match (6/2) lor transaction #345123 are published" 
in the transaction history file 17 (Step 460). 

so The electronic ticket vending and refunding device 
1 sends a notification of service completion to the ter- 
minal device 3 (Step 470), and the terminal device 3 dis- 
plays it on the display device 23 (screen 580) (Step 480), 
and then the communication is completed (Step 490). 

55 As mentioned above, by using a telephone line, a 
ticket purchaser can purchase a ticket without going to 
a ticket stall. Since data between devices is encrypted, 
even if data flowing the telephone line is intercepted, the 
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electronic ticket will not be forged or illegally repro- 
duced. Furthermore, if the transaction history of an elec- 
tronic ticket and electronic money is stored, a trouble on 
transmission and reception of the electronic money and 
electronic ticket can be prevented. In this embodiment, 
by using a microprocessor (CPU) in which a program is 
set so that an electronic ticket and electronic money are 
mounted in one device (IC chip) and the transaction his- 
tory when the electronic ticket and electronic money are 
actually sent or received and the transaction history 
which is applicable only after the electronic ticket is de- 
leted are updated, the transaction history can be pre- 
vented from alteration. 

(2) Case of refunding a purchased ticket 

Fig. 12 is a flow chart showing the outline of the 
processing procedure for refunding a purchased elec- 
tronic ticket using the electronic ticket vending and re- 
funding system shown in Fig. 1 and Fig. 13 is an illus- 
tration showing operation screen examples displayed 
on the display device 23 of the terminal device 3 for re- 
funding an electronic ticket. 

Firstly, a ticket purchaser calls out the electronic 
ticket vending and refunding device 1 of a ticket publish- 
er or a ticket vender of the ticket to be refunded by using 
the terminal device 3 (Step 910). The electronic ticket 
vending and refunding device 1 sends the initial menu 
to the terminal device 3 via the telephone line 4 (Step 
920) and the terminal device 3 displays an initial menu 
1 31 0 on the display device 23. 

When the ticket purchaser inputs B 2" equivalent to 
ticket refunding using the input device 22 according to 
the initial menu, the terminal device 3 sends "2" to the 
electronic ticket vending and refunding device 1 via the 
telephone line 4 (Step 930). The electronic ticket vend- 
ing and refunding device 1 sends data corresponding to 
a screen 1 320 to the terminal device 3 and the terminal 
device 3 displays the screen 1 320 on the display device 
23 and instructs the ticket purchaser to insert the IC 
card, that is, the electronic ticket storage device 2. 

When the ticket purchaser inserts the electronic 
ticket storage device 2 in which the electronic ticket to 
be refunded is stored, the terminal device 3 sends to the 
electronic ticket vending and refunding device 1 that the 
electronic ticket storage device 2 is inserted. The elec- 
tronic ticket vending and refunding device 1 sends a 
command to the terminal device 3 so as to read the ticket 
information data from the electronic ticket storage de- 
vice 2 and display the ticket content on the display de- 
vice 23 (Step 940). The terminal device 3 reads the tick- 
et information data from the electronic ticket storage de- 
vice 2 (Steps 950, 960) and displays the ticket informa- 
tion data on the display device 23. The terminal device 
3 may display a plurality of ticket information data at a 
time according to the size of the display device 23 or 
may display one by one. Furthermore, in this case, the 
electronic ticket vending and refunding device 1 may 



command the terminal device 3 so that the terminal de- 
vice 3 sends read ticket information data to the electron- 
ic ticket vending and refunding device 1 one by one and 
the electronic ticket vending and refunding device 1 dis- 
5 plays it or may control so that the CPU 27 of the terminal 
device 3 displays read data. 

A case that the CPU 27 displays all stored ticket 
information data on one screen will be explained here- 
under. 

io When the terminal device 3 displays the ticket infor- 
mation stored in the electronic ticket storage device 2 
as shown on a screen 1 330 and then the ticket purchas- 
er inputs the ticket number (1 in this example) to be re- 
funded from the ticket items shown on the screen 1 330, 
is the terminal device 3 sends "1" to the electronic ticket 
vending and refunding device 1 (Step 970). When the 
electronic ticket vending and refunding device 1 re- 
ceives "I", the electronic ticket vending and refunding 
device 1 sends a sending request command for the elec- 
tronic ticket of Item No. 1 to the electronic ticket storage 
device 2 via the terminal device 3 (Steps 980, 990). 

The communication procedure between the elec- 
tronic ticket storage device 2 and the electronic ticket 
vending and refunding device 1 will be explained here- 
under for the two cases which are divided depending on 
the form of an electronic ticket. 

(a) When an electronic ticket comprises unencrypted 
ticket information data and an electronic signature 

In the same way as with the case of purchasing a 
ticket newly in (1 ) mentioned above, the electronic ticket 
storage device 2 retains the global public key PTg, the 
local secret key ST12, the local public key PT12, and 
PT1 2*STg which is obtained by signing (encrypting) the 
local public key PT12 by the global secret key STg and 
the electronic ticket vending and refunding device 1 re- 
tains the global public key PTg, the local secret key STII, 
the local public key PTII, PTIVSTg which is obtained 
by signing (encrypting) the local public key PTII by the 
global secret key STg, and the global secret key STg for 
electronic ticket. 

Firstly, the electronic ticket vending and refunding 
device 1 sends encrypted data of PT11*STg+R*ST11 to 
the electronic ticket storage device 2 via the telephone 
line 4. In this case, the message R includes transaction 
identification, transaction sequence number, and ticket 
data. The CPU 38 of the electronic ticket storage device 
2 acquires unencrypted ticket information data and en 
electronic signature from the area of Item No. 1 of the 
electronic ticket storage area 32. 

Next, the CPU 38 produces a message VR from the 
message R, the ticket information, and the electronic 
signature and sends encrypted data of 
PT12*STg+VR*ST12 to the electronic ticket vending 
and refunding device 1 via the telephone line 4 (Step 
1000). When there is an invalid flag in the electronic tick- 
et storage area 32, the invalid flag is turned ON. The 



25 



30 



35 



40 



45 



SO 



13 



pusjsnnrin- <fp 



f)7iniSRA? i > 



25 



EP0 713 198 A2 



26 



reason that the invalid flag is turned ON without deleting 
the data is that the data which is stored originally is pre- 
vented from becoming indefinite due to a communica- 
tion failure before the refunding is completed and at the 
same time, a status that the electronic ticket storage de- 
vice 2 is forcibly pulled out immediately after the refund- 
ing is completed and both the valid ticket and the refund 
exist in the electronic ticket storage device 2 is prevent- 
ed. 

When the electronic ticket vending and refunding 
device 1 receives this encrypted data via the terminal 
device 3 (Steps 1010, 1020), the electronic ticket vend- 
ing and refunding device 1 acquires the unencrypted 
ticket information data, the electronic signature, and the 
message R from the message VR, verifies the validity 
of the message R by confirming whether R which is sent 
by the electronic ticket vending and relunding device 1 
before is included, and then verifies the validity of the 
electronic signature (Step 1 030). The validity of the elec- 
tronic signature is verified by decrypting the electronic 
signature by the public key PT1 retained by the elec- 
tronic ticket vending and refunding device 1 and com- 
paring the identity with the ticket information data When 
the electronic signature is produced from a part of the 
ticket information data, it is desirable to extract a part of 
the ticket information data received by the same proce- 
dure (for example, the same hash function) as that for 
producing the electronic signature and compare it with 
the electronic signature which is decrypted before. 

When the confirmation of the validity is completed, 
the electronic ticket vending and refunding device 1 reg- 
isters reception of the electronic ticket in the transaction 
history file (Step 1040). Fig. 14 shows transaction his- 
tory data 1 370 which is an example of the content of the 
transaction history file 1 7 of the electronic ticket vending 
and refunding device 1 . When the electronic ticket is re- 
ceived, the ticket is refunded, so that the deletable flag 
corresponding to the transaction history of the transac- 
tion number concerned in vending and refunding of the 
ticket is changed to ON. 

Thereafter, the electronic ticket vending and refund- 
ing device 1 sends acknowledgment of reception of the 
electronic ticket to the electronic ticket storage device 2 
(Step 1050). When the electronic ticket storage device 
2 receives the acknowledgment of reception via the ter- 
minal device 3 (Step 1060), the electronic ticket storage 
device 2 registers completion of sending of the ticket in 
the transaction history storage area 35 (Step 1 070). Fig. 
15 shows transaction history storage data 1380 which 
is an example of the content of the transaction history 
storage area 35 of the electronic ticket storage device 2. 

When the registration is completed, the electronic 
ticket storage device 2 sends notification of completion 
to the electronic ticket vending and refunding device 1 
(Step 1080). When the electronic ticket storage device 
2 receives the completion of registration via the terminal 
device (Step 1090), the electronic ticket storage device 
2 updates the ticket information file 16, registers that the 



corresponding ticket becomes revendible (Step 1100), 
subtracts the refund from the electronic money storage 
area 12, and then sends the electronic money equiva- 
lent to the refund to the electronic ticket storage device 

s 2 (Step 1110). 

When the refunding commission is required in this 
case, the electronic ticket storage device 2 calculates 
the refund in consideration of the amount of money. 
When the electronic ticket storage device 2 receives the 

io electronic money (Step 1130) via the terminal device 
(Step 1120), the electronic ticket storage device 2 accu- 
mulates the amount of electronic money in the electronic 
money storage area 33 (Step 1 1 40). The electronic tick- 
et storage device 2 registers reception of the electronic 

is money in the transaction history storage device 35 (Step 
1150). When there exists a deletable flag area in the 
transaction history storage area 35, the deletable flag 
corresponding to the transaction history concerned in 
vending and purchasing of the refunded ticket is turned 

20 ON. 

Thereafter, the electronic ticket storage device 2 
sends acknowledgment of reception of the electronic 
ticket to (Step 1 1 60). When the electronic ticket vending 
and refunding device 1 receives the acknowledgment of 

25 reception from the electronic ticket storage device 2 via 
the terminal device 3 (Step 1170), the electronic ticket 
vending and refunding device 1 registers completion of 
refunding in the transaction history file 17 (Step 1180). 
When there exists a deletable flag area, the deletable 

30 flag corresponding to the transaction history concerned 
in vending and purchasing of the refunded ticket is 
turned ON. 

Therefore, differences between the example of the 
transaction history data 1370 of the electronic ticket 

35 vending and refunding device 1 shown in Fig. 14 and 
the example of the transaction history data 650 shown 
in Fig. 7 are the respect that the deletable flag of the 
transaction history of the transaction number of the tick- 
et and money to be refunded is changed to ON and the 

40 respect that the transaction history of the transaction 
number receiving the corresponding refunded ticket and 
the transaction history of the transaction number refund- 
ing the corresponding money are added. Differences 
between the example of the transaction history storage 

4 $ data 1380 of the electronic ticket storage device 2 
shown in Fig. 1 5 and the example of the transaction his- 
tory storage data 630 shown in Fig. 8 are the respect 
that the deletable flags of the corresponding money of 
the ID of the corresponding opposite of communication 

50 and the ticket transaction history are changed to ON re- 
spectively and the respect that the transaction history 
returning the corresponding ticket and the transaction 
history receiving the corresponding money are added. 
Finally, the electronic ticket vending and refunding 

ss device 1 sends a notification of service completion to 
the terminal device 3 (Step 1190), and the terminal de- 
vice 3 displays it on the display device 23 (screen 1 360) 
(Step 1200), and the communication is completed (Step 
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1210). 

(b) When an electronic ticket comprises only ticket 
information data which is wholly encrypted and 
electronically signed s 

Firstly, the electronic ticket vending and refunding 
device 1 sends encrypted data of PT11*STg+R+ST11 
to the electronic ticket storage device 2 via the tele- 
phone line 4 In this case, the message R includes trans- io 
action identification, transaction sequence number, and 
ticket data. The CPU 38 of the electronic ticket storage 
device 2 acquires the ticket information data which is 
wholly encrypted by the secret key ST1 from the area 
of Item No. 1 ol the electronic ticket storage area 32. is 

Next, the CPU 36 produces a message VR from the 
message R and the encrypted ticket information and 
sends encrypted data of PTl2*STg+VR*ST12 to the 
electronic ticket vending and refunding device 1 via the 
telephone line 4 (Stop 1000) When there is an invalid 20 
flag in the electiomc ticket storage aiea 32, the invalid 
flag is turned ON When the electronic ticket vending 
and refunding device 1 receives it via the terminal device 
3 (Steps 1010, 1020). the electronic ticket vending and 
refunding device 1 acquires the encrypted ticket infor- 25 
mation data and the message R from the message VR, 
verifies the validity of the message R by confirming 
whether R which is sent by the electronic ticket vending 
and refunding device 1 before is included, and then ver- 
ifies the validity of the encrypted ticket information data 30 
(Step 1030). The validity of the encrypted ticket infor- 
mation data is verified by decrypting the ticket informa- 
tion data which is encrypted by the public key PT1 re- 
tained by the electronic ticket vending and refunding de- 
vice 1 and judging whether the decrypted data can be 35 
interpreted or not. 

Hereafter, Step 1 040 to Step 1 21 0 are the same as 
the steps in (a) When an electronic ticket comprises un- 
encrypted ticket information data and an electronic sig- 
nature, so that the explanation thereof will be omitted. 40 

When there exists no invalid flag in the electronic 
ticket storage area 32, another storage area (not shown 
in the drawing) for storing ticket information data to be 
sent is installed, and the ticket information data to be 
sent is copied in this storage area, and the correspond- 45 
ing ticket information data existing in the electronic ticket 
storage area is deleted, and then the copied ticket infor- 
mation data is sent, and when ticket information data 
having no electronic signature is to be sent, it is not cop- 
ied in the aforementioned another storage area so that so 
an occurrence of a status that there exist a plurality of 
tickets at the time of communication can prevented and 
the evidence can be perpetuated. 

(3) Case of confirming the content of a purchased ss 
electronic ticket 

A case that the content of an electronic ticket stored 



in the electronic ticket storage device 2 is confirmed by 
the terminal device 3 shown in Fig. 3 or a portable ter- 
minal device 1400 having the constitution shown in Fig. 
1 6 will be explained hereunder. In this case, the terminal 
device 1400 is used for explanation. However, needless 
to say, the terminal device 3 or a similar device including 
the constitution elements of the terminal device 1400 
may be used. The portable terminal device 1400 com- 
prises, as shown in Fig. 16, an input device 1410 for 
inputting data, a display device 1 420 for displaying data, 
an IC card R/W 1430 for communicating with the elec- 
tronic ticket storage device 2 comprising an IC card, a 
storage device 1 440, and a CPU 1 450 for controlling the 
aforementioned devices 1410 to 1440. 

The communication procedure between the elec- 
tronic ticket storage device 2 and the electronic ticket 
vending and refunding device 1 will be briefly explained 
hereunder for the two cases which are divided depend- 
ing on the form of an electronic ticket by referring to the 
screen examples shown in Fig. 17. 

(a) When an electronic ticket comprises unencrypted 
ticket information data and an electronic signature 

When the power switch of the terminal device 1 400 
is turned on, a screen 1510 is displayed on the display 
device 1420. When a ticket purchaser inserts the elec- 
tronic ticket storage device 2 into the IC card R/W 1430 
of the terminal device 1410 and then selects "acknowl- 
edgment of electronic ticket content" by inputting "1" 
equivalent to "ticket content displayed" using the input 
device 1410, the terminal device 1400 sends a com- 
mand for acquiring ticket information data to the elec- 
tronic ticket storage device 2 via the IC card R/W 1430. 
The electronic ticket storage device 2 receives the com- 
mand from the external I/O interface 37 and the CPU 38 
acquires the ticket information data from the electronic 
ticket storage area 32 according to the command and 
sends the ticket information data to the terminal device 
1400 via the external I/O interface 37. The terminal de- 
vice 1400 displays the received ticket information data 
on the display device 1420, for example, as shown on 
a screen 1520. 

When a plurality of electronic tickets are stored in 
the electronic ticket storage device 2, the terminal de- 
vice 1400 may display the contents of all the electronic 
tickets according to the size of the display device 1420 
or may display one by one. When the number at which 
an electronic ticket is stored is designated so as to send 
a ticket information data acquisition command, the con- 
trol operation of the CPU 38 of the electronic ticket stor- 
age device 2 may be programmed so as to send only 
the electronic ticket data corresponding to the designat- 
ed number to the terminal device 1400 or to send the 
ticket information data of all the electronic tickets to the 
terminal device 1400 when no specific number is des- 
ignated. 

If "acknowledgment of money balance" is selected 
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by inputting "2" equivalent to "money balance displayed" 
using the screen input device 1410 when the screen 
1510 is displayed on the display device 1420. in the 
same way as with "ticket content displayed", the termi- 
nal device 1400 sends a command for acquiring the 
electronic money balance data ot the electronic money 
storage area 33 to the electronic ticket storage device 
2 via the IC card R/W 1430. The terminal device 1400 
displays the received electronic money balance data on 
the display device 1420, for example, as shown on a 
screen 1530. 

Or, if "acknowledgment of transaction history" is se- 
lected by inputting "3" equivalent to "transaction history 
displayed" using the screen input device 1410 when the 
screen 1510 is displayed on the display device 1420, in 
the same way as with "ticket content displayed", the ter- 
minal device 1400 sends a command for acquiring the 
transaction history storage data of the transaction his- 
tory storage area 35 to the electronic ticket storage de- 
vice 2 via the IC card R/W 1430. The terminal device 
1400 displays the received transaction history storage 
data on the display device 1 420, for example, as shown 
on a screen 1540. 

(b) When an electronic ticket comprises only ticket 
information data which is wholly encrypted and 
electronically signed 

A difference from the case of (a) mentioned above 
is that the CPU 38 of the electronic ticket storage device 
2 acquires data in which the whole of an electronic ticket, 
that is, ticket information data is encrypted and the pub- 
lic key PTII for decrypting encrypted ticket information 
data from the electronic ticket storage area 32, decrypts 
the electronic ticket using the acquired public key PTII, 
and then sends the data to the terminal device 1400. 

As mentioned above, for the ticket information data 
acquisition command, the electronic ticket storage de- 
vice 2 sends unencrypted ticket information data to the 
terminal device 1400, so that the encryption/decryption 
means is not necessary for the terminal device 1 400. As 
a result, even a general portable terminal device can 
confirm the content of a ticket briefly and the security 
can be ensured at the same time because the encryp- 
tion method is not known by a third person. Furthermore, 
the validity as an electronic ticket cannot be proved only 
by unencrypted ticket information data, that is, ticket in- 
formation data which is not signed electronically, so that 
there is an advantage that the electronic ticket cannot 
be forged only by reproducing the ticket information da- 
ta. 

The suitable embodiments of the present invention 
have been explained above. However, needless to say, 
the present invention is not limited to the aforemen- 
tioned embodiments and within a range which is not de- 
viated from the concept of the present invention, the de- 
sign can be changed variously. 

As the aforementioned embodiments show, accord- 



ing to the present invention, since a ticket can be pur- 
chased or refunded using a communication means such 
as a telephone line, a ticket purchaser can purchase or 
refund a ticket at home without going to a ticket vending 
5 counter. 

Since different ticket publishers can share a single 
electronic ticket system safely, a publisher can store dif- 
ferent electronic tickets in one electronic ticket storage 
device. 

to Furthermore, by storing both electronic money and 
an electronic ticket in a single electronic ticket storage 
device and controlling sending and reception thereof 
and the sending and reception history thereof by the mi- 
croprocessor of the electronic ticket storage device, a 

is transaction history having a high evidence ability which 
cannot be atterated easily can be realized. 

Furthermore, it is possible to prevent a ticket pur- 
chaser from retaining both a valid ticket and a refund at 
the same time and when the ticket purchaser cannot re- 

20 ceive the refund, it can bs proved that he retains the 
ticket. 



Claims 

25 

1. An electronic ticket vending system comprising: 
electronic ticket vending means for generating an 
electronic ticket and executing at least one of vend- 
ing and refunding by exchanging said generated 

30 electronic ticket with electronic money; 

a communication line connected to said vend- 
ing means; 

at least one terminal means connected to said 
35 communication line for executing input output, 

and transmission and reception so as to exe- 
cute at least one of vending and refunding of 
an electronic ticket; and electronic ticket stor- 
age means having means for electronically 
40 connecting said terminal means for storing 

electronic money and a purchased electronic 
ticket; 

wherein by a request of one of purchasing and 
refunding of an electronic ticket by at least one 
45 of said terminal means and said electronic 

ticket storage means, at least one of said elec- 
tronic ticket and said electronic money is sent 
from said electronic ticket vending means via 
said communication line. 

50 

2. An electronic ticket vending system according to 
Claim 1 , wherein said electronic ticket vending 
means comprising: 

55 ticket production means for producing a ticket; 

ticket transmission and reception means for 
transmitting or receiving an electronic ticket; 
money transmission and reception means for 
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3. 



transmitting or receiving electronic money; 
money storage means for storing electronic 
money; transaction history storage means for 
storing a history (hereinafter referred to as 
transaction history) transmitting or receiving 
electronic money and an electronic ticket; and 
encryption key storage means for storing an 
encryption key. 

An electronic ticket vending system according to 
Claim 2, wherein said ticket production means com- 
prising: 

a microcomputer which is set so as to produce 
an electronic ticket from at least data indicating 
a ticket publication source and data indicating 
the price of a ticket. 

An electronic ticket vending system according to 
Claim 2, wherein said electronic ticket vending 
means further comprising: 



electronic ticket storage means for storing at 

least an electronic ticket; 

electronic money storage means for storing at 

least electronic money; 

transaction history storage means; 

an I/O interface with the outside; and 

a microprocessor which is set so as to control 

transmission and reception of an electronic 

ticket and electronic money and storage the 

history thereof. 



6. 
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15 



20 



means for storing a secret key of asymmetric 
encryption algorithm which varies with each 
ticket publisher and a public key which forms a 25 
counterpart to said secret key. 



An electronic ticket vending system according to 
Claim 1, wherein said electronic ticket storage 
means comprising: 



30 



35 



40 9. 



An electronic ticket vending system according to 
Claim 5, wherein said electronic ticket storage 
means further comprising: 4 $ 



for said second command, and return said 
ticket information and said electronic signature 
as a response to said second command when 
said microprocessor judges that said second 
command is valid. 

An electronic ticket vending system according to 
Claim 5, wherein said electronic ticket storage 
means comprising: 

means for storing ticket information which is 
encrypted by said secret key of the asymmetric 
encryption algorithm; and 
means for storing a public key which forms a 
counterpart to said secret key which encrypts 
said ticket information, 

wherein said microprocessor is set so as to 
return the result which is obtained by decrypting 
said encrypted ticket information by said public 
key to a first command obtained via said I/O 
interface with the outside for reading said unen- 
crypted ticket data as a response to said first 
command, check the validity of a second com- 
mand for reading data having said electronic 
signature for said second command ; and return 
said encrypted ticket information as a response 
to said second command when said microproc- 
essor judges that said second command is 
valid. 

An electronic ticket vending system according to 
Claim 6, wherein said microprocessor is set so as 
to return a response to the electronic signature 
which is sent together with said second command 
obtained via said physical interface with the outside 
on whether there exists an electronic signature con- 
forming to said electronic signature in said elec- 
tronic ticket storage means. 

An electronic ticket vending system according to 
Claim 5, wherein said microprocessor is set so that 
an item relating to said electronic ticket cannot be 
deleted from said transaction history storage 
means until said electronic ticket stored in said elec- 
tronic ticket storage means is deleted. 



means for storing unencrypted ticket data; and 
means for sloring an electronic signature which 
is produced by encrypting the whole or a part 
of said ticket data by said secret key of the 
asymmetric algorithm; 

wherein said microprocessor is set so as to 
return said unencrypted ticket information to a 
first command obtained via said I/O interface 
with the outside for reading said unencrypted 
ticket data as a response to said first command, 
check the validity of a second command for 
reading data having said electronic signature 



10. An electronic ticket vending system according to 
Claim 5, wherein said microprocessor is set so as 
to store electronic money in said electronic money 
50 storage means for refunding of the ticket and then 
delete the electronic ticket to be refunded which is 
stored in said electronic ticket storage area of said 
electronic ticket storage means. 

55 11. An electronic ticket vending system according to 
Claim 5, wherein said electronic ticket storage 
means further has an area for storing an invalid flag 
and said microprocessor comprising: 
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mean for making said invalid flag correspond- 
ing to said electronic ticket to be refunded valid 
for refunding of the ticket and then transferring 
said electronic ticket to said electronic ticket 
vending means, and 5 
means for deleting said electronic ticket stored 
in said electronic ticket storage area of said 
electronic ticket storage means after comple- 
tion of transfer 

10 

12. An electronic ticket vending method in a system 
comprising electronic ticket transmission and 
reception means at least one terminal means, and 
a communication line connecting said electronic 
ticket transmission and reception means and said 1$ 
at least one terminal means comprising: 

a step of storing electronic money and an elec- 
tronic ticket and sending the purchase desire 
electronic ticket to s*id electronic ticket trans- 20 
mission anc icceptton means from at least one 
of the terminals connected to the electronic 
ticket storage means which can be electroni- 
cally connected to said terminal means via said 
communication line. 25 
a step of sending a sending request for the pur- 
chase cost to satd purchase desire terminal 
side when said electronic ticket can be vended 
from said electronic ticket transmission and 
reception means; 30 
a step of sending the electronic money of said 
purchase cost to said electronic ticket transmis- 
sion and reception means from said purchase 
desire terminal side via said communication 
line; 35 
a step of sending said purchase desire elec- 
tronic ticket to said purchase desire terminal 
side from said electronic ticket transmission 
and reception means after said electronic 
money is received; and 40 
a step of receiving said sent electronic ticket on 
said terminal side and storing it in said elec- 
tronic ticket storage means connected to said 
terminal side. 

4S 

13. An electronic ticket vending method according to 
Claim 12, wherein when said purchased electronic 
ticket is to be refunded, said method further com- 
prising: 

so 

a step of sending a refunding request to said 
electronic ticket transmission and reception 
means from said terminal side via said commu- 
nication line and requesting sending of said 
electronic ticket which is requested to refund to £ 5 
the electronic ticket storage means connected 
to said terminal side; 

a step of receiving said electronic ticket from 



said electronic ticket storage means via said 
communication line and then confirming the 
validity of said electronic ticket; 
a step of sending electronic money of said ticket 
refund to said terminal side via said communi- 
cation line when said electronic ticket transmis- 
sion and reception means judges that said elec- 
tronic ticket is valid as a result of said confirma- 
tion; and 

a step of transferring said electronic money to 
said electronic ticket storage device from said 
terminal means receiving said electronic 
money. 

14. An electronic ticket refunding method in a system 
comprising electronic ticket transmission and 
reception means, at least one terminal means, and 
a communication line connecting said electronic 
ticket transmission and reception means and said 
at least one terminal means comprising: 

a step of storing electronic money and an elec- 
tronic ticket and sending an electronic ticket 
refunding request to said electronic ticket trans- 
mission and reception means from at least one 
of the terminals connected to the electronic 
ticket storage means which can be electroni- 
cally connected to said terminal means via said 
communication line; 

a step for requesting sending of said electronic 
ticket which is requested to refund to the elec- 
tronic ticket storage means connected to said 
terminal side from said electronic ticket trans- 
mission and reception means; 
a step of receiving said electronic ticket from 
said electronic ticket storage means via said 
communication line and then confirming the 
validity of said received electronic ticket by said 
electronic ticket transmission and reception 
means; 

a step of sending electronic money of said ticket 
refund to said terminal side via said communi- 
cation line when said electronic ticket transmis- 
sion and reception means judges that said elec- 
tronic ticket is valid as a result of said confirma- 
tion; and 

a step of transferring said electronic money to 
said electronic ticket storage device from said 
terminal means receiving said electronic 
money. 

15. An electronic ticket vending method according to 
Claim 12, further comprising: 

a step of receiving said electronic money from 
said electronic ticket storage means by said 
electronic ticket transmission and reception 
means; 
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a step of storing that said electronic money is 
received from said electronic ticket storage 
means; 

a step of sending said electronic ticket to said 
electronic ticket storage means; and s 
a step of storing that said electronic ticket is 
sent to said electronic ticket storage means. 

16. An electronic ticket vending method according to 
Claim 1 3, further comprising: io 

a step of receiving said electronic ticket from 
said electronic ticket storage means by said 
electronic ticket transmission and reception 
means; 

a step ol storing that said electronic ticket is 
received from said electronic ticket storage 
means; 

a step of sending said electronic money to said 
electronic licket storage means; and 
a step of storing that said electronic money is 
sent to said electronic ticket storage means. 

17. An electronic ticket vending method according to 
Claim 12, further comprising: 2S 

a step of sending said electronic money to said 
electronic ticket transmission and reception 
means from said terminal side; 
a step of storing that said electronic money is 30 
sent to said electronic ticket transmission and 
reception means: 

a step of receiving said electronic ticket by said 
terminal side; and 

a step of storing that said terminal side receives 35 
said electronic ticket. 

18. An electronic ticket vending method according to 
Claim 13, further comprising: 

40 

a step of sending said electronic ticket to said 
electronic ticket transmission and reception 
means from said electronic ticket storage 
means; 

a step of storing that said electronic ticket is 45 
sent; a step of receiving said electronic money 
from said electronic ticket transmission and 
receplion means by said electronic ticket stor- 
age means; and 

a step of storing that said electronic ticket stor- so 
age means receives said electronic money. 



15 



20 



55 



BNSDOCIO: -cEP . .071319BA2 I > 



19 



EP0 713 198 A2 




EP 0 713 198 A2 




EP 0 713 198 A2 



FIG. 3 



30 









IC 






CHIP 




CARD 





22 



24 



INPUT 
DEVICE 


fDISPLA^ 
iDEVICEy 


COMMUNI- 
CATION 
DEVICE 








-h 








IC CARD 
R/W 




CPU 




STORAGE 
DEVICE 



TERMINAL DEVICE 



26 



27 



25 



IC CHIP (ELECTRONIC TICKET STORAGE DEVICE) 



31 



ELECTRONIC 
TICKET 

STORAGE AREA 


ELECTRONIC 
MONEY 

STORAGE AREA 


PROGRAM 
STORAGE AREA 


TRANSACTION 
HISTORY 
STORAGE AREA 


WORKING 
AREA 



STORAGE DEVICE 



38 



CPU 



37 



EXTERNAL 
I/O 

INTERFACE 



22 



EP0 713 198 A2 



FIG. 5 



ELECTRONIC TICKET 
STORAGE DEVICE 2 



TERMINAL 
DEVICE 3 



ELECTRONIC TICKET 
VENDING & REFUNDING 
DEVICE 1 



c 



START 



3 



210 



220 



280 



SEND THE ELECTRONIC 
MONEY 



CALL OUT BY TELEPHONE 




SEND THE INITIAL MENU 


230 






SELECT THE KIND OF 
SERVICE 






240 


1 




SEND THE TICKET MENU 


250 




SELECT THE TICKET 




1 


^ 260 


1 


CALCULATE THE COST AND 
REQUEST TO SENT THE COST 


270 


TRANSFER 


1 




290 




300 


TRANSFER 




RECEIVE THE ELECTRONIC 
MONEY 



310 



CHECK AND STORE THE 
ELECTRONIC MONEY 



320 



REGISTER RECEPTION OF 
THE ELECTRONIC MONEY 



350 



REGISTER COMPLETION OF 
SENDING OF THE ELECTRONIC 
MONEY 



340 



330 



TRANSFER 



SEND THE ACKNOWLEDGEMENT 
OF RECEPTION OF THE 
ELECTRONIC MONEY 



360 



370 



TRANSFER 



PRODUCE THE ELECTRONIC 
TICKET 



380 



410 



400 



UPDATE THE TICKET 
INFORMATION FILE 



RECEIVE THE ELECTRONIC 
TICKET 



TRANSFER 



390 



SEND THE ELECTRONIC 
TICKET 



420 



STORE THE ELECTRONIC 
TICKET 



430 



REGISTER RECEPTION OF 
THE ELECTRONIC TICKET 

I 



440 



SEND THE ACKNOWLEDGEMENT 
OF RECEPTION OF THE 
ELECTRONIC TICKET 



450 



460 



TRANSFER 



480 



DISPLAY THAT THE 
SERVICE IS COMPLETED 



REGISTER COMPLETION OF 
SENDING OF THE ELECTRONIC 
MONEY 

I 



470 



NOTIFY THAT THE SERVICE 
IS COMPLETED 



490 



END OF TELEPHONE 



c 



znz 

END 



D 



BNSDOCID:<EP 0713198A2 I > 



23 



EP0 713 198 A2 



FIG. 6 



510 



TICKET SERVICE FOR THE LEAGUE 
GAME OF PROFESSIONAL BASEBALL 
A TEAM 

[INITIAL MENU] 

1. TICKET VENDING 

2. TICKET REFUNDING 

3. TICKET CHANGING 



520 



input -r 



[MATCHES] 




1. 


TEAM A X TEAM B 


:JUNE 1. 


2. 


TEAM A x TEAM B 


:JUNE 2, 


3. 


TEAM A x TEAM B 


:JUNE 3, 


4. 


TEAM A x TEAM C 


:JUNE 5. 


5. 


TEAM A X TEAM C 


:JUNE 6. 


6. 


TEAM A x TEAM C 


:JUNE 7. 


7. 


OTHER 





530 



INPUT "2" 



[SEAT KINDS] 

1. RESERVED SEAT A 

2. RESERVED SEAT B 

3. OUTFIELD RESERVED BLEACHERS 

4. OUTFIELD NON-RESERVED 
BLEACHERS 



540 



INPUT ~r 



[NUMBER OF TICKETS] 
PLEASE INPUT THE NUMBER 
OF TICKETS. 

(NOT MORE THAN 6) 



550 



1 



ARE THE ORDERED TICKETS OF 
TWO RESERVED SEATS FOR JUNE 
2ND MATCH OF TEAMS A TO B? 
THE TICKET COST IS ¥7,400. 
IF CORRECT PLEASE PUSH T , 
OTHERWISE PUSH M 2" . 



560 




570 



INSERT THE CARD 



UNDER PROCESSING. 
PLEASE WAIT FOR A WHILE. 



580 



END OF TICKET SENDING 



¥7,400 TO THE TICKET IS 

CERTAINLY RECEIVED. 

PLEASE CONFIRM THE TICKETS OF 

TWO RESERVED SEATS FOR JUNE 

2ND MATCH OF TEAMS A TO B 

ARE SENT TO YOU. 

THE TRANSACTION NUMBER FOR 

ANY INQUIRY IS "345123" . 

THANK YOU FOR THE APPLICATION. 



INPUT "2 



RNisnnrirv <fp n7i3iqflA? i 



24 



EP 0 713 198 A2 



FIG. 7 



650 



TRANSACTION ft 


OBJECT 


SENT/ 
RECEIVED 


CONTENT 


DELETABLE 
FLAG 












3 4 5 12 2 


MONEY 


RECEIVED 


¥ 2.8 0 0 


OFF 


3 15 12 2 


TICKET 


SENT 


6/5: RESERVED SEAT B 21-12 


OFF 


3 4 5 12 3 


MONEY 


RECEIVED 


¥ 7.4 0 0 


OFF 


3 4 5 12 3 


TICKET 


SENT 


6/2 : RESERVED SEAT A 2-56 
6/2 : RESERVED SEAT A 2-57 


OFF 













FIG. 8 



630 



lb OF THE OPPOSITE 
OF COMMUNICATION 


OBJECT 


SENT/ 
RECEIVED 


CONTENT 


DELETAbLE 
FLAG 


PRO BASEBALL 
TEAM A 


MONEY 


SENT 


¥7,4 0 0 


OFF 


PRO BASEBALL 
TEAM A 


TICKET 


RECEIVED 


# 1 


OFF 



FIG. 9 



610 



PUBLISHER S 
NAME 



TRANSAC- 


TICKET 


TION # 


NAME 



NUMBER 
TICKETS 



OF 



DATE 1 


SEAT 1 




DATEm 


SEAT m 



BNSDOCID: <EP 0713198A2 1 > 



25 



EP 0 713 198 A2 



FIG. 10 



620 



TICKET # 


TICKET DATA 


DIGITAL 
SIGNATURE 


INVALID FLAG 


1 


TICKET DATA 1 


SIGNATURE 1 


INVALID FLAG 1 










m 


TICKET DATAm 


SIGNATURE m 


INVALID FLAG m 



FIG. 11 



640 



TICKET # 


ENCRYPED TICKET DATA 


PUBLIC KEY 


INVALID FLAG 


1 


ENCRYPED TICKET DATA 1 


PUBUC KEY 1 


INVALID FLAG 1 






• 
• 




m 


ENCRYPED TICKET DATA m 


PUBLIC KEYm 


INVALID FLAG m 



26 



EP0 713 198 A2 



FIG. 12 



ELECTRONIC TICKET 
STORAGE DEVICE 2 



TERMINAL 
DEVICE 3 



ELECTRONIC TICKET 
VENDING & REFUNDING 
DEVICE 1 



c 



START 



I 910 






920 


CALL OUT BY TELEPHONE 




SEND THE INITIAL MENU 


930 








SELECT THE KIND OF 








SERVICE 






940 



960 



950 



SEND CONTENT OF THE 
TICKET 



SEND THE ORDER OF 
ACQUIRING CONTENT OF THE 
TICKET 



DISPLAY CONTENT OF THE 
TICKET 

I 



970 



980 



1000 



SEND THE ELECTRONIC 
TICKET 



DISPLAY AND SELECT 
CONTENT OF THE TICKET 




REQUEST TO SEND 
ELECTRONIC TICKET 


990 




TRANSFER 




1010 




1020 


TRANSFER 




RECEIVE THE ELECTRONIC 
TICKET 


— ► 




I 1030 


CHECK THE ELECTRONIC 
TICKET 



1040 



REGISTER RECEPTION OF 
THE ELECTRONIC TICKET 



1070 




1060 




I 1050 


REGISTER COMPLETION OF 
SENDING OF THE ELECTRONIC 
MONEY 




TRANSFER 




SEND THE ACKNOWLEDGEMENT 
OF RECEPTION OF THE 
ELECTRONIC TICKET 


I 1080 




1090 




I 1100 


SEND COMPLETION OF THE 




TRANSFER 




UPDATE THE TICKET 


RECORD 






INFORMATION FILE 


1130 




1120 




I 1110 


RECEIVE THE ELECTRONIC 
MONEY 




TRANSFER 




SEND THE ELECTRONIC 
MONEY 


I 1140 










STORE THE ELECTRONIC 










MONEY 










I 1150 










REGISTER RECEPTION OF 
THE ELECTRONIC MONEY 










I 1160 




1170 




1180 


SEND THE ACKNOWLEDGEMENT 
OF RECEPTION OF THE 
ELECTRONIC MONEY 




TRANSFER 


— 


REGISTER COMPLETION OF 
SENDING OF THE ELECTRONIC 
MONEY 










1200 




I 1190 






DISPLAY THAT THE 
SERVICE IS COMPLETED 




NOTIFY THAT THE SERVICE 
IS COMPLETED 



1210 



c 



END OF TELEPHONE 

I 



END 



BNSDOCID: <EP 0713198A2J. > 



27 



EP 0 713 198 A2 



FIG. 13 



1310 



TICKET SERVICE TOR THE LEAGUE 
GAME OF PROFESSIONAL BASEBALL 
A TEAM 

[INiTiAL MENU] 

1. TICKET VENDING 

2. TICKET REFUNDING 

3. TICKET CHANGING 




PLEASE SELECT A TICKET NUMBER. 

1. S PRODUCTION 23198 ONE TICKET 
FOR TANAKA HANAKO CONCERT, 
SEAT S, C-5 ON MAY 20. 

2. TWO TICKETS FOR PRO BASEBALL 
TEAM A 345123. AND FOR PRO 
BASEBALL OPEN GAME, RESERVED 
SEAT A, 2-56 ON JUNE 2, AND 
RESERVED SEAT A. 2-57 ON JUNE 
2, 



INPUT m v 



1340 



ARE THE REFUNDING TICKETS TWO 
OF RESERVED SEAT A, 2-56 ON 
JUNE 2, AND RESERVED SEAT A, 
2-57 ON JUNE 2, FOR PRO BASEBALL 
TEAM A 345123 AND FOR PRC 
BASEBALL OPEN GAME? 
IF CORRECT PLEASE PUSH *r , 
OTHERWISE PUSH "2" . 



1350 



INSERT THE CARD 



UNDER PROCESSING. 
PLEASE WAIT FOR A WHILE. 



1360 



END OF SENDING 
ELECTRONIC MONEY 



REFUNDING MONEY ¥7,400 IS SENT, 
PLEASE CONFIRM. 

THANK YOU FOR THE APPLICATION. 



28 

BNSDOCID: <EP 071319SA2 I > 



EP 0 713 198 A2 



FIG. 14 



1370 



TRANSACTION H 


OBJECT 


SENT/ 
RECEIVED 


CONTENT 


DELETABLE 
FLAG 












3-15)22 


MONEY 


RECEIVED 


¥ 2,8 0 0 


OFF 


3 4 5 12 2 


TICKET 


SENT 


6/5 : RESERVED SEAT B 21-12 


OFF 


3 4 5 12 3 


MONEY 


RECEIVED 


¥ 7,4 0 0 


ON 


3 4 5 12 3 


TICKET 


SENT 


6/2 : RESERVED SEAT A 2-56 
6/2 : RESERVED SEAT A 2-57 


ON 












3 fi 7 0 0 1 


TICKET 


RECEIVED 


6/2 : RESERVED SEAT A 2-56 
6/2 : RESERVED SEAT A 2-57 


ON 


3 6 7 0 0 1 


MONEY 


SENT 


¥7,4 0 0 


ON 



FIG. 15 



1380 



ID OF THE OPPOSITE 
OF COMMUNICATION 


OBJECT 


SENT/ 
RECEIVED 


CONTENT 


DELETABLE 
FLAG 


PhO &ASEBALL 
TEAM A 


MONEY 


SENT 


¥ 7,4 0 0 


ON 


PRO BASEBALL 
TEAM A 


TICKET 


RECEIVED 


# 1 


ON 












PRO BASEBALL 
TEAM A 


TICKET 


SENT 


# 1 


ON 


PRO BASEBALL 
TEAM A 


MONEY 


RECEIVED 


¥ 7,4 0 0 


ON 



BNSDOCID: <EP 0713198A2 I 



29 



EP 0 713 198 A2 



FIG. 16 



1410 1420 




TERMINAL DEVICE 



INPUT 
DEVICE 



IC CARD 
R/W 



CPU 



STORAGE 
DEVICE 



1430 1450 



1440 



RNsnnnm: <fp n7iai<wAp i > 



30 



EP0 713 198 A2 



FIG. 17 



1510 



INPUT u r 



1. TICKET CONTENT DISPLAYED 

2. MONEY BALANCE DISPLAYED 

3. TRANSACTION HISTORY 
DISPLAYED 



1520 



1. S PRODUCTION 23198 ONE TICKET 
FOR TANAKA HANAKO CONCERT. 
SEAT S. C-5 ON MAY 20. 

2. TWO TICKETS FOR PRO BASEBALL 
TEAM A 345123, AND FOR PRO 
BASEBALL OPEN GAME, RESERVED 
SEAT A, 2-56 ON JUNE 2, AND 
RESERVED SEAT A. 2-57 ON JUNE 2. 



INPUT M 2" 



INPUT "3" 



1540 



PRO BASEBALL 






TEAM A MONEY 


SENT 


¥7,400 


PRO BASEBALL 






TEAM A TICKET 


RECEIVED 


#1 


x 1530 



BALANCE ¥2,600 



RNSDOCID: <EP 0713198A2 1 > 



31 



THIS PAGE BLANK (uspto) 



